Skip to content

Instantly share code, notes, and snippets.

@baztan106483

baztan106483/server-ha-postgres-standalone-ha.xml.diff

Last active September 20, 2017 08:41
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save baztan106483/e67989b15f6429228310ca79bc0110df to your computer and use it in GitHub Desktop.
Save baztan106483/e67989b15f6429228310ca79bc0110df to your computer and use it in GitHub Desktop.
Download ZIP
Change in server/standalone.xml
Raw
server-ha-postgres-standalone-ha.xml.diff
--- standalone-ha.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone-ha.xml 2017-09-20 10:12:19.037852209 +0200
@@ -108,6 +108,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -133,18 +136,29 @@
<password>sa</password>
</security>
</datasource>
- <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
- <connection-url>jdbc:h2:${jboss.server.data.dir}/keycloak;AUTO_SERVER=TRUE</connection-url>
- <driver>h2</driver>
+ <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true" use-ccm="true">
+ <connection-url>jdbc:postgresql://${env.POSTGRES_PORT_5432_TCP_ADDR}:${env.POSTGRES_PORT_5432_TCP_PORT:5432}/${env.POSTGRES_DATABASE:keycloak}</connection-url>
+ <driver>postgresql</driver>
+ <pool>
+ <flush-strategy>IdleConnections</flush-strategy>
+ </pool>
<security>
- <user-name>sa</user-name>
- <password>sa</password>
+ <user-name>${env.POSTGRES_USERNAME:keycloak}</user-name>
+ <password>${env.POSTGRES_PASSWORD:password}</password>
</security>
+ <validation>
+ <check-valid-connection-sql>SELECT 1</check-valid-connection-sql>
+ <background-validation>true</background-validation>
+ <background-validation-millis>60000</background-validation-millis>
+ </validation>
</datasource>
<drivers>
<driver name="h2" module="com.h2database.h2">
<xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
</driver>
+ <driver name="postgresql" module="com.postgresql.jdbc">
+ <xa-datasource-class>org.postgresql.xa.PGXADataSource</xa-datasource-class>
+ </driver>
</drivers>
</datasources>
</subsystem>
@@ -220,26 +234,26 @@
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<transport lock-timeout="60000"/>
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <distributed-cache name="sessions" mode="SYNC" owners="1"/>
- <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <replicated-cache name="work" mode="SYNC"/>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
+ <replicated-cache name="work" mode="SYNC"/>
+ <distributed-cache name="sessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<distributed-cache name="actionTokens" mode="SYNC" owners="2">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</distributed-cache>
</cache-container>
<cache-container name="server" aliases="singleton cluster" default-cache="default" module="org.wildfly.clustering.server">
@@ -516,7 +530,7 @@
<buffer-cache name="default"/>
<server name="default-server">
<ajp-listener name="ajp" socket-binding="ajp"/>
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -540,7 +554,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Raw
server-ha-postgres-standalone.xml.diff
--- standalone.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone.xml 2017-09-20 10:12:18.149852065 +0200
@@ -106,6 +106,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -131,18 +134,29 @@
<password>sa</password>
</security>
</datasource>
- <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
- <connection-url>jdbc:h2:${jboss.server.data.dir}/keycloak;AUTO_SERVER=TRUE</connection-url>
- <driver>h2</driver>
+ <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true" use-ccm="true">
+ <connection-url>jdbc:postgresql://${env.POSTGRES_PORT_5432_TCP_ADDR}:${env.POSTGRES_PORT_5432_TCP_PORT:5432}/${env.POSTGRES_DATABASE:keycloak}</connection-url>
+ <driver>postgresql</driver>
+ <pool>
+ <flush-strategy>IdleConnections</flush-strategy>
+ </pool>
<security>
- <user-name>sa</user-name>
- <password>sa</password>
+ <user-name>${env.POSTGRES_USERNAME:keycloak}</user-name>
+ <password>${env.POSTGRES_PASSWORD:password}</password>
</security>
+ <validation>
+ <check-valid-connection-sql>SELECT 1</check-valid-connection-sql>
+ <background-validation>true</background-validation>
+ <background-validation-millis>60000</background-validation-millis>
+ </validation>
</datasource>
<drivers>
<driver name="h2" module="com.h2database.h2">
<xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
</driver>
+ <driver name="postgresql" module="com.postgresql.jdbc">
+ <xa-datasource-class>org.postgresql.xa.PGXADataSource</xa-datasource-class>
+ </driver>
</drivers>
</datasources>
</subsystem>
@@ -217,10 +231,10 @@
<subsystem xmlns="urn:jboss:domain:infinispan:4.0">
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="sessions"/>
<local-cache name="authenticationSessions"/>
@@ -228,15 +242,15 @@
<local-cache name="loginFailures"/>
<local-cache name="work"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
<local-cache name="actionTokens">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</local-cache>
</cache-container>
<cache-container name="server" default-cache="default" module="org.wildfly.clustering.server">
@@ -465,7 +479,7 @@
<subsystem xmlns="urn:jboss:domain:undertow:4.0">
<buffer-cache name="default"/>
<server name="default-server">
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -489,7 +503,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Raw
server-mysql-standalone-ha.xml.diff
--- standalone-ha.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone-ha.xml 2017-09-20 10:37:23.278071357 +0200
@@ -108,6 +108,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -133,18 +136,29 @@
<password>sa</password>
</security>
</datasource>
- <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
- <connection-url>jdbc:h2:${jboss.server.data.dir}/keycloak;AUTO_SERVER=TRUE</connection-url>
- <driver>h2</driver>
+ <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true" use-ccm="true">
+ <connection-url>jdbc:mysql://${env.MYSQL_PORT_3306_TCP_ADDR}:${env.MYSQL_PORT_3306_TCP_PORT}/${env.MYSQL_DATABASE:keycloak}</connection-url>
+ <driver>mysql</driver>
+ <pool>
+ <flush-strategy>IdleConnections</flush-strategy>
+ </pool>
<security>
- <user-name>sa</user-name>
- <password>sa</password>
+ <user-name>${env.MYSQL_USERNAME:keycloak}</user-name>
+ <password>${env.MYSQL_PASSWORD:password}</password>
</security>
+ <validation>
+ <check-valid-connection-sql>SELECT 1</check-valid-connection-sql>
+ <background-validation>true</background-validation>
+ <background-validation-millis>60000</background-validation-millis>
+ </validation>
</datasource>
<drivers>
<driver name="h2" module="com.h2database.h2">
<xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
</driver>
+ <driver name="mysql" module="com.mysql.jdbc">
+ <xa-datasource-class>com.mysql.jdbc.jdbc2.optional.MysqlXADataSource</xa-datasource-class>
+ </driver>
</drivers>
</datasources>
</subsystem>
@@ -220,26 +234,26 @@
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<transport lock-timeout="60000"/>
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <distributed-cache name="sessions" mode="SYNC" owners="1"/>
- <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <replicated-cache name="work" mode="SYNC"/>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
+ <replicated-cache name="work" mode="SYNC"/>
+ <distributed-cache name="sessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<distributed-cache name="actionTokens" mode="SYNC" owners="2">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</distributed-cache>
</cache-container>
<cache-container name="server" aliases="singleton cluster" default-cache="default" module="org.wildfly.clustering.server">
@@ -516,7 +530,7 @@
<buffer-cache name="default"/>
<server name="default-server">
<ajp-listener name="ajp" socket-binding="ajp"/>
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -540,7 +554,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Raw
server-mysql-standalone.xml.diff
--- standalone.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone.xml 2017-09-20 10:37:22.386067919 +0200
@@ -106,6 +106,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -131,18 +134,29 @@
<password>sa</password>
</security>
</datasource>
- <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
- <connection-url>jdbc:h2:${jboss.server.data.dir}/keycloak;AUTO_SERVER=TRUE</connection-url>
- <driver>h2</driver>
+ <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true" use-ccm="true">
+ <connection-url>jdbc:mysql://${env.MYSQL_PORT_3306_TCP_ADDR}:${env.MYSQL_PORT_3306_TCP_PORT}/${env.MYSQL_DATABASE:keycloak}</connection-url>
+ <driver>mysql</driver>
+ <pool>
+ <flush-strategy>IdleConnections</flush-strategy>
+ </pool>
<security>
- <user-name>sa</user-name>
- <password>sa</password>
+ <user-name>${env.MYSQL_USERNAME:keycloak}</user-name>
+ <password>${env.MYSQL_PASSWORD:password}</password>
</security>
+ <validation>
+ <check-valid-connection-sql>SELECT 1</check-valid-connection-sql>
+ <background-validation>true</background-validation>
+ <background-validation-millis>60000</background-validation-millis>
+ </validation>
</datasource>
<drivers>
<driver name="h2" module="com.h2database.h2">
<xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
</driver>
+ <driver name="mysql" module="com.mysql.jdbc">
+ <xa-datasource-class>com.mysql.jdbc.jdbc2.optional.MysqlXADataSource</xa-datasource-class>
+ </driver>
</drivers>
</datasources>
</subsystem>
@@ -217,10 +231,10 @@
<subsystem xmlns="urn:jboss:domain:infinispan:4.0">
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="sessions"/>
<local-cache name="authenticationSessions"/>
@@ -228,15 +242,15 @@
<local-cache name="loginFailures"/>
<local-cache name="work"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
<local-cache name="actionTokens">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</local-cache>
</cache-container>
<cache-container name="server" default-cache="default" module="org.wildfly.clustering.server">
@@ -465,7 +479,7 @@
<subsystem xmlns="urn:jboss:domain:undertow:4.0">
<buffer-cache name="default"/>
<server name="default-server">
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -489,7 +503,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Raw
server-postgres-standalone-ha.xml.diff
--- standalone-ha.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone-ha.xml 2017-09-20 10:08:34.406038690 +0200
@@ -108,6 +108,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -133,18 +136,29 @@
<password>sa</password>
</security>
</datasource>
- <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
- <connection-url>jdbc:h2:${jboss.server.data.dir}/keycloak;AUTO_SERVER=TRUE</connection-url>
- <driver>h2</driver>
+ <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true" use-ccm="true">
+ <connection-url>jdbc:postgresql://${env.POSTGRES_PORT_5432_TCP_ADDR}:${env.POSTGRES_PORT_5432_TCP_PORT:5432}/${env.POSTGRES_DATABASE:keycloak}</connection-url>
+ <driver>postgresql</driver>
+ <pool>
+ <flush-strategy>IdleConnections</flush-strategy>
+ </pool>
<security>
- <user-name>sa</user-name>
- <password>sa</password>
+ <user-name>${env.POSTGRES_USERNAME:keycloak}</user-name>
+ <password>${env.POSTGRES_PASSWORD:password}</password>
</security>
+ <validation>
+ <check-valid-connection-sql>SELECT 1</check-valid-connection-sql>
+ <background-validation>true</background-validation>
+ <background-validation-millis>60000</background-validation-millis>
+ </validation>
</datasource>
<drivers>
<driver name="h2" module="com.h2database.h2">
<xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
</driver>
+ <driver name="postgresql" module="com.postgresql.jdbc">
+ <xa-datasource-class>org.postgresql.xa.PGXADataSource</xa-datasource-class>
+ </driver>
</drivers>
</datasources>
</subsystem>
@@ -220,26 +234,26 @@
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<transport lock-timeout="60000"/>
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <distributed-cache name="sessions" mode="SYNC" owners="1"/>
- <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <replicated-cache name="work" mode="SYNC"/>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
+ <replicated-cache name="work" mode="SYNC"/>
+ <distributed-cache name="sessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<distributed-cache name="actionTokens" mode="SYNC" owners="2">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</distributed-cache>
</cache-container>
<cache-container name="server" aliases="singleton cluster" default-cache="default" module="org.wildfly.clustering.server">
@@ -516,7 +530,7 @@
<buffer-cache name="default"/>
<server name="default-server">
<ajp-listener name="ajp" socket-binding="ajp"/>
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -540,7 +554,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Raw
server-postgres-standalone.xml.diff
--- standalone.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone.xml 2017-09-20 10:08:33.430040630 +0200
@@ -106,6 +106,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -131,18 +134,29 @@
<password>sa</password>
</security>
</datasource>
- <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true">
- <connection-url>jdbc:h2:${jboss.server.data.dir}/keycloak;AUTO_SERVER=TRUE</connection-url>
- <driver>h2</driver>
+ <datasource jndi-name="java:jboss/datasources/KeycloakDS" pool-name="KeycloakDS" enabled="true" use-java-context="true" use-ccm="true">
+ <connection-url>jdbc:postgresql://${env.POSTGRES_PORT_5432_TCP_ADDR}:${env.POSTGRES_PORT_5432_TCP_PORT:5432}/${env.POSTGRES_DATABASE:keycloak}</connection-url>
+ <driver>postgresql</driver>
+ <pool>
+ <flush-strategy>IdleConnections</flush-strategy>
+ </pool>
<security>
- <user-name>sa</user-name>
- <password>sa</password>
+ <user-name>${env.POSTGRES_USERNAME:keycloak}</user-name>
+ <password>${env.POSTGRES_PASSWORD:password}</password>
</security>
+ <validation>
+ <check-valid-connection-sql>SELECT 1</check-valid-connection-sql>
+ <background-validation>true</background-validation>
+ <background-validation-millis>60000</background-validation-millis>
+ </validation>
</datasource>
<drivers>
<driver name="h2" module="com.h2database.h2">
<xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
</driver>
+ <driver name="postgresql" module="com.postgresql.jdbc">
+ <xa-datasource-class>org.postgresql.xa.PGXADataSource</xa-datasource-class>
+ </driver>
</drivers>
</datasources>
</subsystem>
@@ -217,10 +231,10 @@
<subsystem xmlns="urn:jboss:domain:infinispan:4.0">
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="sessions"/>
<local-cache name="authenticationSessions"/>
@@ -228,15 +242,15 @@
<local-cache name="loginFailures"/>
<local-cache name="work"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
<local-cache name="actionTokens">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</local-cache>
</cache-container>
<cache-container name="server" default-cache="default" module="org.wildfly.clustering.server">
@@ -465,7 +479,7 @@
<subsystem xmlns="urn:jboss:domain:undertow:4.0">
<buffer-cache name="default"/>
<server name="default-server">
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -489,7 +503,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Raw
server-standalone-ha.xml.diff
--- standalone-ha.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone-ha.xml 2017-09-20 10:01:04.090469501 +0200
@@ -108,6 +108,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -220,26 +223,26 @@
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<transport lock-timeout="60000"/>
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <distributed-cache name="sessions" mode="SYNC" owners="1"/>
- <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
- <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
- <replicated-cache name="work" mode="SYNC"/>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
+ <replicated-cache name="work" mode="SYNC"/>
+ <distributed-cache name="sessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="authenticationSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="offlineSessions" mode="SYNC" owners="1"/>
+ <distributed-cache name="loginFailures" mode="SYNC" owners="1"/>
<distributed-cache name="actionTokens" mode="SYNC" owners="2">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</distributed-cache>
</cache-container>
<cache-container name="server" aliases="singleton cluster" default-cache="default" module="org.wildfly.clustering.server">
@@ -516,7 +519,7 @@
<buffer-cache name="default"/>
<server name="default-server">
<ajp-listener name="ajp" socket-binding="ajp"/>
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -540,7 +543,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Raw
server-standalone.xml.diff
--- standalone.xml 2017-09-12 12:25:21.000000000 +0200
+++ /tmp/standalone.xml 2017-09-20 10:01:03.202464803 +0200
@@ -106,6 +106,9 @@
<logger category="sun.rmi">
<level name="WARN"/>
</logger>
+ <logger category="org.keycloack">
+ <level name="${env.KEYCLOAK_LOGLEVEL:INFO}"/>
+ </logger>
<root-logger>
<level name="INFO"/>
<handlers>
@@ -217,10 +220,10 @@
<subsystem xmlns="urn:jboss:domain:infinispan:4.0">
<cache-container name="keycloak" jndi-name="infinispan/Keycloak">
<local-cache name="realms">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="users">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="sessions"/>
<local-cache name="authenticationSessions"/>
@@ -228,15 +231,15 @@
<local-cache name="loginFailures"/>
<local-cache name="work"/>
<local-cache name="authorization">
- <eviction max-entries="10000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="10000"/>
</local-cache>
<local-cache name="keys">
- <eviction max-entries="1000" strategy="LRU"/>
+ <eviction strategy="LRU" max-entries="1000"/>
<expiration max-idle="3600000"/>
</local-cache>
<local-cache name="actionTokens">
- <eviction max-entries="-1" strategy="NONE"/>
- <expiration max-idle="-1" interval="300000"/>
+ <eviction strategy="NONE" max-entries="-1"/>
+ <expiration interval="300000" max-idle="-1"/>
</local-cache>
</cache-container>
<cache-container name="server" default-cache="default" module="org.wildfly.clustering.server">
@@ -465,7 +468,7 @@
<subsystem xmlns="urn:jboss:domain:undertow:4.0">
<buffer-cache name="default"/>
<server name="default-server">
- <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+ <http-listener name="default" socket-binding="http" redirect-socket="https" proxy-address-forwarding="${env.PROXY_ADDRESS_FORWARDING}" enable-http2="true"/>
<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>
<host name="default-host" alias="localhost">
<location name="/" handler="welcome-content"/>
@@ -489,7 +492,9 @@
<subsystem xmlns="urn:jboss:domain:keycloak-server:1.1">
<web-context>auth</web-context>
<providers>
- <provider>classpath:${jboss.home.dir}/providers/*</provider>
+ <provider>
+ classpath:${jboss.home.dir}/providers/*
+ </provider>
</providers>
<master-realm-name>master</master-realm-name>
<scheduled-task-interval>900</scheduled-task-interval>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment